QuestionQ18

Cloud Posture Security

A company using Cortex Cloud Data Security Posture Management (DSPM) has issues caused by insufficient secure controls on its Amazon S3 buckets. An administrator wants to investigate S3 buckets in the XQL editor but cannot view any data in the Cortex Cloud console.

How can the administrator make sure that data is being ingested?

  • A Install the DSPM module into the cloud environment.
  • B Install the Cortex XDR agent for cloud on the S3 buckets.
  • C Verify that S3 is added as a data source.
  • D Verify that the data source is properly onboarded.
Explanation

Amazon S3 data becomes available for analysis only when its data source is properly onboarded with valid AWS permissions, CloudTrail logging, and scan configuration. Adding and enabling the S3 application after this setup allows Data Security to scan the S3 assets and display collected results.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!